CVE-2020-4031

Katalog CVE

CVSS 7.5 · High EPSS 1,6%

Kerentanan Use After Free pada freerdp, fedoraproject fedora +3 lainnya. Skor CVSS 3.1 7.5 (High) menurut NVD.

Deskripsi (NVD)

In FreeRDP before version 2.1.2, there is a use-after-free in gdi_SelectObject. All FreeRDP clients using compatibility mode with /relax-order-checks are affected. This is fixed in version 2.1.2.

Rincian

Terbit di NVD

22 Juni 2020

Terakhir diubah

17 Juni 2026

Status NVD

Modified

CVSS 3.1

7.5 (High), sumber NVD
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H · uraikan di kalkulator

Jenis kelemahan (CWE)

CWE-416: Use After Free

EPSS (30 hari)

1,6% peluang dieksploitasi; lebih tinggi dari 75,3% CVE lain

Produk dan versi terdampak

> Data dari konfigurasi CPE di NVD.

Referensi dan perbaikan

• http://www.freerdp.com/2020/06/22/2_1_2-released release notes · advisory vendor
• https://github.com/FreeRDP/FreeRDP/commit/6d86e20e1e7caaab4f0c7f89e36d32914dbccc52 patch · advisory pihak ketiga
• https://github.com/FreeRDP/FreeRDP/security/advisories/GHSA-gwcq-hpq2-m74g mitigasi · advisory pihak ketiga
• http://lists.opensuse.org/opensuse-security-announce/2020-07/msg00080.html mailing list · advisory pihak ketiga
• https://lists.debian.org/debian-lts-announce/2023/10/msg00008.html mailing list · advisory pihak ketiga
• https://usn.ubuntu.com/4481-1/ advisory pihak ketiga
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/6Y35HBHG2INIC...
• https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/XOZLH35OJWIQL...